home

HashCalc.EXE

HashCalc

SlavaSoft Inc.

This is installed with HashCalc 2.02. The file has been seen being downloaded from doc-00-04-docs.googleusercontent.com and multiple other hosts.
Publisher:
SlavaSoft Inc.

Product:
HashCalc

Description:
Hash Calculator

Version:
2, 0, 2, 0

MD5:
e922301da3512247ab71407096ab7810

SHA-1:
67559307995703808ed2f6ff723e00556dbb0e01

SHA-256:
72b08ebee27f2e57670300acaaa274d1f127f8ab0383d90d7498e2a6257761fe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 2:47:03 AM UTC  (today)

File size:
504 KB (516,096 bytes)

Product version:
2, 0, 2, 0

Copyright:
Copyright (C) 1999-2003 SlavaSoft Inc.

Original file name:
HashCalc.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\hashcalc\hashcalc.exe

File PE Metadata
Compilation timestamp:
3/3/2007 6:04:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:/cZ81c1f05tyPMwQrSpCMPNA7ZHhqX+sMtGC:E7fxX0AC

Entry address:
0x11E58

Entry point:
55, 8B, EC, 6A, FF, 68, 40, A2, 46, 00, 68, D0, 59, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, EC, 71, 46, 00, 33, D2, 8A, D4, 89, 15, 64, 95, 47, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 60, 95, 47, 00, C1, E1, 08, 03, CA, 89, 0D, 5C, 95, 47, 00, C1, E8, 10, A3, 58, 95, 47, 00, 6A, 01, E8, 9F, 28, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 04, 24, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
6.5826

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
408 KB (417,792 bytes)

The file HashCalc.EXE has been discovered within the following program.

HashCalc 2.02  by SlavaSoft Inc.
Compute hash, checksum, and HMAC values for files, text and hex strings.
www.slavasoft.com
7% remove it
 
Powered by Should I Remove It?

The file HashCalc.EXE has been seen being distributed by the following 5 URLs.

https://doc-00-04-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/mck1luvs2gre5m08tgst0esid4dn67m2/1480471200000/11137869472235889494/.../0B2W7x2yRkzBrdzM2bzNoRzJ5Q28?e=download

https://doc-00-04-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/lunvtv5dpaqv43l35870b06bd758fu7a/1442368800000/11137869472235889494/.../0B2W7x2yRkzBrdzM2bzNoRzJ5Q28?e=download

https://docs.google.com/uc?authuser=0&id=0B2W7x2yRkzBrdzM2bzNoRzJ5Q28&export=download

http://download1583.mediafire.com/ojuxouhnubcg/.../HashCalc.exe

https://docs.google.com/uc?id=0B2W7x2yRkzBrdzM2bzNoRzJ5Q28&export=download

Scan HashCalc.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.